The igmp-snooping ssm-policy command configures an SSM group policy in a VLAN to specify the range of SSM groups.
The undo igmp-snooping ssm-policy command deletes the SSM group policy from a VLAN.
By default, no SSM group policy is available in a VLAN.
Parameter |
Description |
Value |
---|---|---|
basic-acl-number |
Specifies the number of a basic ACL that defines the range of SSM groups. |
The value is an integer that ranges from 2000 to 2999. |
Usage Scenario
SSM allows multicast group addresses in the range of 232.0.0.0 to 232.255.255.255. If hosts need to join multicast groups out of this range or they are allowed to join only some of multicast groups in the range, configure an SSM group range for the hosts.
Prerequisites
IGMP snooping has been enabled globally using the igmp-snooping enable (system view) command.
Follow-up Procedure
Enable SSM mapping and configure SSM mapping in the VLAN. The multicast group in the SSM mapping must be in the SSM group range.
Precautions
If IGMP snooping is disabled in the specified VLAN, the configuration succeeds but does not take effect until IGMP snooping is enabled in the VLAN. To enable IGMP snooping in a VLAN, run the igmp-snooping enable (VLAN view) command.
This command must reference an ACL. Before using this command, create an ACL and configure rules for the ACL. By default, the ACL applied to an SSM group policy denies all multicast groups. Therefore, to exclude specific group addresses from the SSM group address range, use a rule permit source any rule with deny rules in the ACL. For details about ACL configuration commands, see ACL Configuration Commands.
# Specify multicast group 225.1.1.123 as an SSM group in VLAN 3.
<HUAWEI> system-view [HUAWEI] acl number 2000 [HUAWEI-acl-basic-2000] rule permit source 225.1.1.123 0 [HUAWEI-acl-basic-2000] quit [HUAWEI] igmp-snooping enable [HUAWEI] vlan 3 [HUAWEI-vlan3] igmp-snooping enable [HUAWEI-vlan3] igmp-snooping ssm-policy 2000